creation of authorization object based on user and plant

can anyone tell me how to create an authorization object.
My requirement is to restrict users from executing a report based on
plant.
I want to create an authorization object which would check whther the
login user have authorization to a plant, if he is authorized then he
should be able to execute otherwise he should not be able to execute the
report.
In addition to this i need to know how should i provide the user with
the access , i.e i should authorise some users . Where and how i should
do that.

What do you mean by roles and profiles.

A step by step approach would be greatly appreciated.
Forward any goods documents to
<email@removed>

Popular White Paper On This Topic

Hi Venki,
To create an authorization object:
1) Execute transaction SU21
2) Double-click an Object Class to select a class that should contain
your new auth object
3) Click on CREATE (F5)
4) (If creating custom field) - Click the 'Field Maintenance' button -->
Click on CREATE (Shift+F1)
5) Enter the Name for the New Authorization field and the corresponding
Data Element and SAVE
6) Confirm the Change Request data for the new Authorization Field
7) Go back two screens (F3-->F3)
8) Enter the Authorization field name and document the object:
9) SAVE and ACTIVATE the documentation
10) Save the new Authorization Object
11) Confirm the change request data for the Authorization Object and
EXIT SU21
12) Finally, the SAP_ALL profile must be re-generated

You may not need steps 4, 5 and 6 for restrictions at plant code level.
For that, just use the existing WERKS field or data element WERKS_D.
To lookup existing authorization fields, use transaction SU20.

I'm sure there's more help in http://help.sap.com. You'll need the
background info available there.

I have assigned few users in the users tab in the creation of
roles i.e in tcode pfcg.

Now do i need to go to su01 and again give the role to all the
users which i have mentioned in user tab in pfcg i.e creation
of roles.

I have also listed the user in the authorization tab i.e when you
click change authorization data nd there you assign the auth obj
right and there i can see the 3 auth field when i click on that
i apop window will ask for values .at this place i have
mentioned the users.

Any how if have a good document please do forward it to me at
email@removed